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IN THE CLAIMS 

The claims are amended as follows: 

1. (Currently Amended) A method, comprising: 

sending an access-request signal comprising a well- 
known uniform resource locator to a network by a terminal 
for connecting to a help-portal server of said network and 
for requesting a provisioning signal or a management 
session signal for configuring the terminal; 

receiving by the terminal, in response to said sending 
the access-request signal, an identity of said help-portal 
server using a chain of trust comprising at least two 
consecutive exchanges of information between trusted 
elements of the network and the terminal; and 

forwarding the acccoo request sending, in response to 
said identifying, a request signal to the help-portal 
server by the terminal using a well known uniform rcoourcc 
locator for said help portal server and a truatcd access 
point node in order with a request to provide the 
provisioning signal or the management session signal to the 
terminal, wherein said help portal server io identified to 
said terminal by the network using a chain of tru3t 
comprising consecutive exchange of information between the 
network and the terminal, 

whe r e i n, after being configured using the provisioning 
signal or the management session signal, the terminal is 
enabled for handling data-protocol services and dynamically 
configured for the data-protocol services specific to a 
service provider in a secure way based on said chain of 
trust so as to be able to connect said terminal to an IP 
backbone network via a network, which provides said data- 
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protocol services and which is provided by said service 
provider . 

2. (Original) The method of claim 1, wherein said data- 
protocol services specific to said service provider are 
provided by a general packet radio service. 

3. (Previously Presented) The method of claim 1, wherein 
the access -request signal is sent by a browser user agent 
block of the terminal . 

4. (Previously Presented) The method of claim 1, wherein 
the well-known uniform resource locator is allowed by an 
access control profile of the terminal. 

5. (Previously Presented) The method of claim 1, further 
comprising : 

sending the provisioning signal or the management 
session signal to the terminal for configuring the 
terminal . 

6. (Previously Presented) The method of claim 5, wherein 
the provisioning signal is sent over an IP bearer or sent 
using a short message service protocol. 

7. (Previously Presented) The method of claim 6, wherein 
said provisioning signal is sent over the IP bearer using a 
hyper text transfer protocol or a hyper text transfer 
protocol secure. 
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8. (Previously Presented) The method of claim 6, wherein 
said provisioning signal is sent over the air. 

9. (Currently Amended) The method of claim 1, wherein 
after pending the access request signal, — further s 
identifying said help-portal server comprises comprising : 

identifying to the terminal the a trusted access 
point node name by a trusted home location register of the 
network ; 

forwarding re - sending the access -request signal to the 
trusted access point node by the terminal; 

identifying to the terminal a trusted domain name 
service server of the network by the trusted access point 
node ; 

forwarding re -sending said access-request signal by 
the terminal to the trusted domain name service server for 
identifying an address mapping for the help-portal server; 
and 

identifying said address mapping to the terminal by 
the trusted domain name service server. 

10. (Previously Presented) The method as in claim 9, 
wherein a security of configuring the terminal is ensured 
by means of the chain of trust built by the trusted home 
location register, by the well-known access point node name 
for accessing the trusted access point node, by the trusted 
access point node, by the trusted domain name service 
server and by the well-known uniform resource locator. 

11. (Currently Amended) The method of claim 1, wherein 
after said sending the request signal to the help-portal 
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server f orwarding the access request signal to the help 
portal server , the method further comprises: 

sending a user authentication request signal to an 
authentication block of the network or to the terminal or 
to both, the authentication block and the terminal, 
respectively, by the help-portal server, and a receiving 
authentication confirmation signal back from the 
authentication block or from the terminal, respectively, or 
from both, the authentication block and the terminal; and 

determining if the terminal is authentic by the help- 
portal server based on the authentication confirmation 
signals. 

12. (Currently Amended) The method of claim 3r3r 1, wherein 
said access-request signal contains user identification 
information, a generic uniform resource locator request for 
the help-portal server or for the help-portal server and a 
device management server , and a well-known access point 
node name for accessing the trusted access point node or 
a wildcard access point node. 

13. (Previously Presented) The method of claim 3r £ 11 , 
wherein if it is determined that the terminal is authentic, 
the method further comprises: 

sending a triggering signal to a provisioning server 
by the help -portal server; and 

sending a provisioning signal by the provisioning 
server to the terminal and so configuring said terminal. 

14. (Cancelled) The method of claim 11, wherein said 
access request oignal containo user identification 
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information, a generic uniform rc30urco locator rcqucot for 
the help portal acrvcr and for a device management ocrvcr, 
a well known accc33 point node name for acccooing the 
trusted acccoa point node or a wildcard acccoa point node. 

15. (Previously Presented) The method of claim ^4- 11 , 
wherein if it is determined that the terminal is authentic, 
the method further comprises the: 

sending an initial provisioning triggering signal to a 
device management server for initial provisioning; and 
sending a further triggering signal by the help- 
portal server to an initialization content handler of the 
terminal, said further triggering signal containing a 
proxy address and a password for connecting to the device 
management server . 

16. (Previously Presented) The method of claim 15, 
further comprising: 

determining if the further triggering signal contains 
an instruction of making a connection to the device 
management server by the terminal. 

17. (Currently Amended) The method of claim 16, wherein 
if the further triggering signal contains the instruction 
for making the connection to the device management server 
4by the terminal, the method further comprises: 

sending a start signal to a device management agent 
block of the terminal by the initialization content 
handler block; 
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sending a further access -request signal containing a 
network access authentication to the device development 
server-)- by the device management agent block; and 

sending the management session signal (3 8 a) — by the 
device development server to the terminal for further 
configuring the terminal. 

18. (Currently Amended) The method of claim 1, wherein 
before #— sending the access-request signal to the network, 
the method further comprises: 

starting a browser user agent by a starting signal^ 
from a uocr . 

19. (Currently Amended) A cellular communication system, 
comprising: 

a terminal, enabled for handling data-protocol 
services and dynamically configured for the data-protocol 
services specific to a service provider in a secure way 
based on a chain of trust, responsive to a provisioning 
signal or to a management session signal for configuring 
the terminal, for providing an access-request signal 
comprising a well-known uniform resource locator for 
connecting to a help-portal server, for sending, in 
response to identifying said help-portal server, a request 
signal to the help-portal server with a request to provide 
the provisioning signal or the management session signal to 
the terminal ; and 

a network provided by said service provider and 
comprising said help-portal server ; responsive to the 
access-request signal, for providing the data-protocol 
services specific to a ^the service provider, for said 
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identifying, in response to said sending the access -request 
signal, said help-portal server to said terminal using said 
chain of trust comprising at least two consecutive 
exchanges of information between trusted elements of the 
network and the terminal, for forwarding the access rcqucot 
signal — to a — help portal server — using a well known 
uniform resource locator for said help portal server and a 
well known access point node name, — for providing the 
provisioning signal or the management session signal to the 
terminal to perform said configuring and for enabling after 
said configuring a connection of said terminal to an IP 
backbone network via the networks — wherein said help portal 
server is identified to said terminal by the network using 
said chain of trust comprising consecutive exchange of 
information between the network and the terminal . 

20. (Currently Amended) The cellular communication 
system of claim 19, wherein the well-known uniform resource 
locator 4is allowed by an access control profile of the 
terminal . 

21. (Previously Presented) The cellular communication 
system of claim 19, wherein said data-protocol services 
specific to said service provider are provided by a general 
packet radio service. 

22. (Currently Amended) The cellular communication system 
of claim 19, wherein the terminal comprises: 

a browser user agent block, responsive to a starting 
signal from a user — (14) , for providing the access-request 
signal to the network. 
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23. (Currently Amended) The cellular communication system 
of claim 19, wherein the network compri3G3 : said 

ar-help-portal server — of said network is 
responsive to the acccog roqucot request signal and to one 
or both authentication confirmation signals, for providing 
a triggering signal, or an initial provisioning triggering 
signal and a further triggering signal; said network 
further comprises: 

a trusted domain name service server, responsive to 
the access-request signal from the terminal, for 
identifying to the terminal an address mapping for the 
help-portal server; 

a trusted access point node, responsive to the access- 
request signal, for providing to the terminal the trusted 
domain name service server; 

a trusted home location register, responsive to the 
access-request signal, for providing the trusted access 
point node to the terminal; and optionally 

an authentication block, responsive to an 
authentication request signal, for providing the one 
authentication confirmation signal to the help-portal 
server. 

24. (Currently Amended) The cellular communication system 
of claim 23, wherein a security of configuring the terminal 
(10) is ensured by means of the chain of trust built by the 
trusted home location register, by the well-known access 
point node name for accessing the trusted access point 
node, and further built by the trusted access point node, 
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by the trusted domain name service server and by the well- 
known uniform resource locator. 

25. (Currently Amended) The cellular communication system 
of claim 2-3- 19 , wherein said access-request signal contains 
user identification inf ormation, a generic uniform resource 
locator request for the help-portal server or for the help- 
portal server and a device management server , and a well- 
known access point node name for accessing the trusted 
access point node or a wildcard access point node. 

26. (Currently Amended) The cellular communication system 
of claim -2-5-23 , wherein the network further comprises: 

a provisioning server, responsive to the triggering 
signal by the help-portal server, for providing the 
provisioning signal to the terminal. 

27 (Cancelled) The cellular communication system of 
claim 23, wherein said access request aignal containo user 
identification information, a generic uniform resource 
locator request for the help portal server and for a device 
management server, — a well known access point node name for 
accessing the trusted access point node or a wildcard 
access point node. 

28. (Currently Amended) The cellular communication system 
of claim 2-7-23 , wherein the network further comprises: 

a device management server, responsive to said initial 
provisioning signal, the access request signal and to a 
further access-request signal containing a network access 
authentication provided by the terminal in response to said 
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further triggering signal , for providing the management 
session signal to the terminal for configuring the 
terminal . 

29. (Previously Presented) The cellular communication 
system of claim 28, wherein the terminal further comprises: 

an initialization content handler, responsive to the 
further triggering signal containing a proxy address and a 
password for connecting to the device management server, 
for providing a start signal; and 

a device management agent block, responsive to the 
start signal, for providing the further access-request 
signal . 

30. (Previously Presented) The cellular communication 
system of claim 19, wherein the provisioning signal is 
sent over an IP bearer or sent using a short message 
service protocol . 

31. (Previously Presented) The cellular communication 
system of claim 30, wherein said provisioning signal is 
sent over the IP bearer using a hyper text transfer 
protocol or a hyper text transfer protocol secure. 

32. (Previously Presented) The cellular communication 
system of claim 30, wherein said provisioning signal is 
sent over the air. 

33. (Previously Presented) A computer program product 
comprising: a computer readable storage medium having 
structure embodying computer program code thereon for 
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execution by a computer processor with said computer 
program code wherein said computer program code comprises 
instructions for performing the method of claim 1, 
indicated as being performed by a terminal or by a network 
or by both the terminal and the network. 

34 . (Cancelled) A terminal, — comprising : 

mcano for pending, — for providing an access request 
signal to a network by a terminal for connecting to a 
help portal ocrvcr of said network and for requesting a 
provisioning signal or a management session signal for 
configuring the terminal, 

means for forwarding the access request signal to the 
help portal server by the terminal using a well known 
uniform resource locator for said help portal server and a 
trusted access point node in order to provide the 
provisioning signal — or the management session signal — fee 
the terminal, — wherein said help portal server is identified 
to said terminal by the network using a chain of trust 
comprising consecutive exchange of information between the 
network and the terminal, 

wherein the terminal is enabled for handling data 
protocol services and dynamically configured for the data 
protocol services specific to a service provider in a 
secure way based on said chain of trust so as to be able to 
connect said terminal to an IP backbone network via a 
network, — which provides said data protocol services and 
which is provided by said service provider. 
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35. (Cancelled) The terminal of claim 34, wherein said 
data protocol services opecific to said service provider 
arc provided by a general packet radio ocrvice. 

36. (Currently Amended) A terminal, comprising: 

a browser user agent block, for providing an access- 
request signal comprising a well-known uniform resource 
locator to a network by a terminal for connecting to a 
help-portal server of said network , for sending, in 
response to identifying said help-portal server, a request 
signal to the help-portal server with a request to provide 
the provisioning signal or the management session signal to 
the terminal and for requesting a provioioning signal or a 
management session signal for configuring the terminal , 

wherein said terminal is configured to receive an 
identity of said help-portal server using a chain of trust 
comprising at least two consecutive exchanges of 
information between trusted elements of the network and the 
the browser user agent block, and 

wherein said terminal io configured to provide 
forwarding the access request signal to the help portal 
server by the terminal using a well known uniform resource 
locator for said help portal server and a trusted access 
point node in order to provide the provisioning signal or 
the management session signal to the terminal, wherein said 
help portal server is identified to said terminal by the 
network using a chain of trust comprising consecutive 
exchange of information between the network and the 
terminal, 

whe r e i n , after being configured using the provisioning 
signal or the management session signal, the terminal is 
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enabled for handling data-protocol services and dynamically 
configured for the data-protocol services specific to a 
service provider in a secure way based on said chain of 
trust so as to be able to connect said terminal to an IP 
backbone network via a network, which providoo is 
configured to provide said data-protocol services and which 
is provided by said service provider. 

37. (Previously Presented) The terminal of claim 36, 
wherein said data-protocol services specific to said 
service provider are provided by a general packet radio 
service. 

38. (New) A network, comprising: 

a help-portal server, for providing the data-protocol 
services specific to a service provider, responsive to the 
request signal from a terminal for providing the 
provisioning signal or the management session signal to the 
terminal to perform configuring of said terminal and for 
enabling after said configuring a connection of said 
terminal to an IP backbone network via the network, which 
is configured to provide said data-protocol services and 
which is provided by said service provider, 

wherein, in response to an access-request signal 
comprising a well-known uniform resource locator for 
connecting to said help-portal server from a terminal, the 
network is configured to identify said help-portal server 
to said terminal using a chain of trust comprising at least 
two consecutive exchanges of information between trusted 
elements of the network and the terminal. 
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39. (New) The network of claim 38, wherein said network 
elements comprise: 

a trusted home location register, responsive to the 
access-request signal, for providing the trusted access 
point node to the terminal, 

a trusted access point node, responsive to the access- 
request signal, for providing to the terminal the trusted 
domain name service server; 

a trusted domain name service server, responsive to 
the access -request signal from the terminal, for 
identifying' to the terminal an address mapping for the 
help-portal server. 

40. (New) The network of claim 38, wherein the help- 
portal server is configured to provide an authentication 
request signal, and said network further comprises: 

an authentication block, responsive to said 
authentication request signal, for providing an 
authentication confirmation signal to the help-portal 
server. 

41. (New) The network of claim 38, wherein the help- 
portal server is configured to provide a triggering signal 
in response to said request signal, and said network 
comprises : 

a provisioning server, responsive to the triggering 
signal by the help-portal server, for providing the 
provisioning signal to the terminal. 
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